agentuniverse (>=0.0.6.dev1, <=0.0.7), bunkoer (0.0.3) +3 more potentially affected by CVE-2026-34070 via langchain-core (0.1.3)

langchain-core PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentuniverse =0.0.6.dev1, =1.8.1, =1.8.1, =0.1.115, =0.1.743 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

agentuniverse (>=0.0.6.dev1, <=0.0.7), bunkoer (0.0.3) +3 more potentially affected by CVE-2026-34070 via langchain-core (0.1.3)

langchain-core PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentuniverse =0.0.6.dev1, =1.8.1, =1.8.1, =0.1.115, =0.1.743 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

agentuniverse (>=0.0.6.dev1, <=0.0.7), bunkoer (0.0.3) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.1.3)

langchain-core PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentuniverse =0.0.6.dev1, =1.8.1, =1.8.1, =0.1.115, =0.1.743 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

EUVD-2025-23941

Malicious code in bioql PyPI...

CVE-2025-8697

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

Command Injection

Overview agentUniverse is an agentUniverse is a framework for developing applications powered by multi-agent base on large language model. Affected versions of this package are vulnerable to Command Injection via the StdioServerParameters function of the MCPSessionManager/MCPTool/MCPToolkit...

CVE-2025-8697

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-8697

AgentUniverse up to 0.0.18 contains a vulnerability in StdioServerParameters within MCPSessionManager/MCPTool/MCPToolkit that enables remote OS command injection. This is a concrete flaw affecting the StdioServerParameters function, with exploitation reported publicly. Multiple sources (including...

CVE-2025-8697 agentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injection

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-8697 agentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injection

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-8697

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-8697: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

AgentUniverse command injection vulnerability

agentUniverse is agentuniverse-ai open source an LLM multi-agent framework that allows developers to easily build multi-agent applications. A command injection vulnerability exists in agentUniverse 0.0.18 and earlier versions, which stems from misuse of the function StdioServerParameters in the...

PT-2025-32308 · Unknown · Agentuniverse

Name of the Vulnerable Software and Affected Versions: agentUniverse versions up to 0.0.18 Description: A critical issue exists in agentUniverse that allows for remote OS command injection. The issue affects the StdioServerParameters function within the MCPSessionManager/MCPTool/MCPToolkit...

abstra (>=1.8.26, <=2.5.1), adeso (>=0.0.1, <=0.0.4) +70 more potentially affected by CVE-2024-6844 via flask-cors (4.0.0)

flask-cors PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - abstra =1.8.26, =0.0.1, =0.0.1, =0.0.6.dev1, =0.1.2, =0.0.7, =0.2.18, =0.1.0, =51.9.7, =0.0.25, =0.0.10, =0.0.12 and more Source cves:...

agentuniverse (>=0.0.6.dev1, <=0.0.8), airiasearch (>=0.0.3, <=0.1.2) +16 more potentially affected by CVE-2024-7246 via grpcio (1.63.0)

grpcio PYPI version 1.63.0 is affected by a known vulnerability. The following packages have a transitive dependency on grpcio and may be impacted: - agentuniverse =0.0.6.dev1, =0.0.3, =0.0.36, =0.1.21, =2.0.0.1, =0.9.221, =0.4.3, =2.4.3, =18.4.0, =0.1.0, =0.3.4 and more Source cves: CVE-2024-724...